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DETAILED ACTION 

1 . A request for continued examination under 37 CFR 1.114, including tine fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
03/07/2010 has been entered. Claims 21, 27-28, 35, and 40-41 have been amended. 
Claims 42-48 have been added. Claims 21-48 are pending examination. 

Claim Objections 

2. Claim 42 is objected to because of the following informalities: The claim recites 
"wherein the pseudo server," in Line 14, but the rest of the claim referrers to the pseudo 
server as "at least one pseudo server." Examiner suggests changing "wherein the 
pseudo server," to "wherein the at least one pseudo server." Appropriate correction is 
required. 

Claim Rejections - 35 USC § 102 



3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 



Application/Control Number: 10/599,402 
Art Unit: 2441 



Pages 



A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

4. Claims 21-22, 26-29, and 33-34 are rejected under 35 U.S.C. 102(b) as being 
anticipated by US 2001/0042171 A1 to Vermeulen. 

5. In regard claim 21 , Vermeulen teaches a server-side data-processing machine 
{see "Remote Server," in Fig. 1 [14]) for securely and efficiently fulfilling network 
requests, the server-side data-processing machine comprising: 

(a) a data-access engine, residing in a server memory {see inherent file 
storage component inside Remote Sen/er, e.g. "Servers 14...Sucli servers 
dedicated to storing files," in [0025] Lines 7-8) of server-side data-processing 
machine {see "Remote Server," in Fig. 1 [14]), for communicating {see 
"communication between Proxy and Remote Server, in Fig. 2 [12] [14] [22] [24]) 
with at least one pseudo server {see control program in Proxy Server, e.g. "proxy 
server 12... executes a control program stored in main memory 34... to perform 
tlie functions described in... FIG. 2,"'m [0026] Lines 1-11) residing in a 
secondary memory (see "FiAM of Proxy server, in Fig. 3 [34]) of a secondary 
data-processing machine {see "Proxy Server," m Fig. 1 [12]), 

wherein said at least one pseudo server {e.g. "a control program," in 
[0026] Lines 1-11) includes a server-logic module {e.g. "a control 
program... containing a sequence of control instructions to perform the functions 
described in... FIG. 2," in [0026] Lines 1-11) and a user interface (Ul) {see 
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interface of proxy to receive client output initiated by client user, in Fig, 3 [31], 
e.g. "Proxy server 12 has a first interface 31, which is connected to the client," in 
[0026] Lines 2-3) for fulfilling data requests {see Tile Request" and Tile 
Transfer," in Fig. 2 [21] [27]) originating from a client memory (see "requests 
inherently originated from the clients RAM," in Fig. 4 [43]) of a client-side data- 
processing machine (see "Client," \n Fig. 2 [11]), and 

wherein the data request from said client-side data-processing machine 
for data stored in said data-access engine must be routed through one of said at 
least one pseudo server (see "Client" "Proxy" and "Remote Server," in Fig. 1 [11] 
[12] [14], e.g. "If client 1 1 wants to load a file from server 14, this request is 
handled via proxy server 12," in [0022] Lines 9-11), 

wherein the functionality of said data access engine (see inherent file 
storage component inside Remote Server, e.g. "Servers 14... Such sen/ers 
dedicated to storing files," in [0025] Lines 7-8) related to said data request from 
said client-side data-processing machine (see "File Request" in Fig. 2 [21]) is 
confined to data storage and retrieval (see functionality of the Remote Server's 
storage engine to store files and have files retrieved from the storage engine, e.g. 
"Servers 14... Such servers dedicated to storing files," in [0025] Lines 7-8 and 
e.g. "Client 1 1 therefore sends a file request 21 with the address of the requested 
file to proxy server 12. . .proxy server 12 will send a "send file" request, 26, to 
remote server 14, which then transfers the file, 27, to the proxy server," in [0024] 
Lines 5-17). 
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6. In regard to claim 22, Vermeulen teaches the server-side data-processing 
machine (see "Remote Server," \n Fig. 1 [14]) of claim 21, wherein said data-access 
engine is located in a first network {see inherent Control Program of Remote Server in a 
Remote Network, in Fig. 1 [13][14]) and at least one of said at least one pseudo one 
server {see Control Program of Proxy Server, e.g. "a control program stored in main 
memory 34," \n [0026] Lines 1-11) is located in a second network {see Network 
between client and Proxy, in Fig. 1 [11] [12], e.g. "A client 11 is connected to a proxy 
server 12," m [0022] Lines 2-3) having said client-side data-processing machine {see 
"Client," \x\ Fig. 2 [11]). 

7. In regard to claim 26, Vermeulen teaches the server-side data-processing 

machine (see "Remote Server," in Fig. 1 [14]) of claim 21, wherein a local data request 
from said client-side data-processing machine {see "Client," m Fig. 2 [11]) for data 
stored in one of said at least one pseudo server can be fulfilled directly by said one of 
said at least one pseudo server (e.g. "If client 11 requests a file that has already been 
loaded and therefore is still contained in the cache, the proxy server will send this file 
directly from the cache to the client," in [0022] Lines 13-15). 

8. In regard to claim 27, Vermeulen teaches the server-side data-processing 
machine of claim 21, wherein said server-logic module {e.g. "a control 
program... containing a sequence of control instructions to perform the functions 
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described in... FIG. 2," in [0026] Lines 1-11) and said user interface of each of said at 
least one pseudo servers {see interface of proxy to receive client output initiated by 
client user, in Fig. 3 [31], e.g. "Proxy sen/er 12 has a first interface 31, which is 
connected to the client," in [0026] Lines 2-3) further are for fulfilling logic requests (see 
inherent logic contained in "File Request", in Fig. 2 [21]) and user interface requests 
(see requests sent using user interface, e.g. "an Internet browser, for example. 
According to inputs by a user of the client, the control program causes files to be loaded 
from the distributed file system over the network into main memory," in [0028] Lines 3- 
6) originating from said client memory (see "requests inherently originated from the 
clients RAM," In Fig. 4 [43]) of said client-side data-processing machine (see "Client," 
in Fig. 2 [11]). 

9. Claims 28-29 and 33-34 are corresponding system claims of apparatus claims 
21-22 and 26-27 respectively; therefore, they are rejected under the same rationale. 

Claim Rejections - 35 USC § 103 

1 0. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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1 1 . Claims 23-24 and 30-31 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Vermeulen in view of US 6,604,143 B1 to Nagar et al. 
(hereinafter referred to as Nagar). 

12. In regard to claim 23, Vermeulen teaches the server-side data-processing 
machine {see "Remote Server," in Fig. 1 [14]) of claim 22, wherein said data-access 
engine is configured to communicate {e.g. "control program adapted to... return the 
computed hash code to the client via an interface of server 14," in [0025] Lines 4-7) 
with other client-side data-processing machines (e.g. "several clients are connected to 
such a proxy server via an internal corporate network (intranet)," in [0023] Lines 4-5), 
but 

Vermeulen does not teach that the data-access engine communicates with other 
client-side data-processing machines via pseudo servers residing within said first 
network as claimed. 

However, Nagar teaches the data-access engine {see "Server Program," in Fig. 
2 [220]) communicates with other client-side data-processing machines {see multiple 
computers and intranet as the client-side, In Fig. 2 [202] [206] [208]) via pseudo 
servers residing within said first network {see multiple proxy servers inside intranet, in 
Fig. 2 [202] [228] [230]). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to add the features of using a plurality of proxy servers to 
communicate with clients inside of an intranet network, as disclosed in Nagar, into the 
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teachings of Vermeulen, since both of the references are directed toward proxy caches, 
hence would be considered to be analogous based on their related fields of endeavor. 

One would be motivated to do so because it is well known that in distributed 
computer network systems (e.g. " Computer network 13 with its servers 14 represents a 
distributed file system," from Vermeulen in [0022]), multiple system components may 
be used in a larger system to facilitate larger amount's of requested information in order 
to reduce the load on a single system component. 

13. In regard to claim 24, Vermeulen teaches the server-side data-processing 
machine {see "Remote Server," in Fig. 1 [14]) of claim 21 , but 

Vermeulen does not teach wherein said data-access engine is configured to 
communicate via a content-filtering device deployed between said data access engine 
and said at least one pseudo server as claimed. 

However, Nagar teaches a data-access engine (see "Server Program," in Fig. 2 
[220]) is configured to communicate via a content-filtering device deployed between 
{see "Response Filter," in Fig. 2 [232] and Fig. 3 [320]) said data access engine {see 
"Sen/er Program," in Fig. 2 [220]) and said at least one pseudo server {see "Proxy 
Server," in Fig. 2 [228]). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to add the features filtering content between a proxy 
server and a remote server, as disclosed in Nagar, into the teachings of Vermeulen, 
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since both of the references are directed toward proxy caches, hence would be 
considered to be analogous based on their related fields of endeavor. 

One would be motivated to do so because Nagar discloses the current problem 
with state of the art filtering methods (e.g. "Generally, once the software developer 
writes a system that performs any filtering of information, what is filtered or how it is 
filtered cannot be modified except by having the software developer create a whole new 
filtering system," from Nagar in Col. 1, Lines 41-44) and discloses the need for 
improvement in content filtering (e.g. "Therefore it is desirable to improve the filtering of 
information." from Nagar In Col. 2, Lines 4-5), and the incorporation of Nagar into 
Vermeulen could enhance Vermeulen by allowing for current modification of filter rules 
in filtering incoming and outgoing proxy request data as it is well known that proxies are 
filtered {e.g. "The proxy server with plug-in filters allows for easy modification of what 
information to filter and how to filter it," from Nagar in Col. 2, Lines 11-13). 

14. Claims 30-31 are corresponding system claims of apparatus claims 23-24; 
therefore, they are rejected under the same rationale. 

15. Claims 25 and 32 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Vermeulen in view of US 6,356,941 B1 to Cohen. 

16. In regard to claim 25, Vermeulen teaches the server-side data-processing 
machine {see "Remote Server," m Fig. 1 [14]) of claim 21, but 
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Vermeulen does not teach wherein said data-access engine is configured to only 
fulfill said data request according to restrictions set by a network vault as claimed. 

However, Cohen teaches a data-access engine (see "Server's Software 
Module," in Fig. 3 [48]) is configured to only fulfill said data request (e.g. "request by a 
transaction to access stored information," in Col. 13, Lines 42-43) according to 
restrictions set by a network vault {e.g. Security software module 48 examines each 
such request to determine.. .whether the user has permission to perform the transaction 
to the particular network vault," in Col. 13, Lines 43-47). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to combine the feature of restricting the retrieval of the 
requested stored data by using "network vaults" as disclosed in Cohen, into the 
teachings of Vermeulen since both reference are directed toward a accessing stored 
data, hence would be considered to be analogous based on their related fields of 
endeavor. 

One would have been motivated to do so as Cohen discloses the problems 
associated with proxy servers and filtered communication and discussed the 
advantages of using network vaults to increase security {e.g. "firewalls and proxy 
servers, can only provide filtering of communication and therefore are not sufficiently 
robust and secure to permit a direct connection to, and packet exchange with, limited 
access network 18. Therefore, if a risk is overlooked, the filter will fail. Also, the security 
of the firewall and/or proxy server itself can be breached, enabling the intruder to 
change the declarations for filtering in order to permit unauthorized access through the 
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firewall and/or proxy server. However, the present invention does not require such 
packet exchange across networks, so no such declarations are needed," from Cohen 
in Col. 7, Lines 39-50). 

1 7. Claim 32 is a corresponding system claim of apparatus claim 25; therefore, it is 
rejected under the same rationale 

18. Claims 35-36 and 40-41 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Vermeulen in view of US 2002/0099957 A1 Kramer et al. 
(hereinafter referred to as Kramer). 

19. In regard to claim 35, Vermeulen teaches a method for securely and efficiently 
fulfilling network requests, the method comprising the steps of: 

(a) installing a data-access engine in a server (see inherent file storage 
component inside Remote Server, e.g. "Servers 14... Such servers dedicated to 
storing files," in [0025] Lines 7-8) of server-side data-processing machine {see 
"Remote Server," in Fig. 1 [14]), for communicating {see "communication 
between Proxy and Remote Server, in Fig. 2 [12] [14] [22] [24]) with at least one 
pseudo server {see control program in Proxy Sen/er, e.g. "proxy server 
12. . .executes a control program stored in main memory 34. . .to perform the 
functions described in... FIG. 2," in [0026] Lines 1-11) residing in a secondary 
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memory (see "RAM of Proxy server, in Fig. 3 [34]) of a secondary data- 
processing macliine (see "Proxy Server," \n Fig. 1 [12]), 

wlierein said at least one pseudo server (e.g. "a control program," in 
[0026] Lines 1-11) includes a server-logic module {e.g. "a control 
program... containing a sequence of control instructions to perform the functions 
described in... FIG. 2," in [0026] Lines 1-11) and a user interface (Ul) {see 
interface of proxy to receive client output initiated by client user, in Fig. 3 [31], 
e.g. "Proxy server 12 has a first interface 31, which is connected to the client," in 
[0026] Lines 2-3) for fulfilling data requests (see "File Request" and "File 
Transfer," in Fig. 2 [21] [27]) from said client-side data-processing machine for 
data stored in said data-access engine originating from a client memory {see 
"requests inherently originated from the clients FiAM," in Fig. 4 [43]) of a client- 
side data-processing machine (see "C//ent"in Fig. 2 [11]), 

wherein the functionality of said data access engine (see inherent file 
storage component inside Remote Server, e.g. "Servers 14... Such servers 
dedicated to storing files," in [0025] Lines 7-8) related to said data request from 
said client-side data-processing machine {see "File Request" in Fig. 2 [21]) is 
confined to data storage and retrieval {see functionality of the Remote Server's 
storage engine to store files and have files retrieved from the storage engine, e.g. 
"Servers 14... Such servers dedicated to storing files," in [0025] Lines 7-8 and 
e.g. "Client 11 therefore sends a file request 21 with the address of the requested 
file to proxy server 12. . .proxy server 12 will send a "send file" request, 26, to 
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remote server 14, which then transfers the file, 27, to the proxy server, " in [0024] 

Lines 5-17), but 

Vermeulen does not teach 

(b) denying said data requests unless said data requests liave been routed 
through one of said at least one pseudo server, 

However, Kramer teaches a firewall (see "Firewall," in Fig. 3 [31 1]) that blocks 
file requests from clients to an origin server that were not routed through a proxy server 
(e.g. "The firewall 311 is configured to deny any outgoing requests that do not originate 
from the proxy server 312. . ..checking that the browser client is authorized to maiie the 
request, the proxy server 312 then generates a separate request to the desired external 
resource on behalf of the browser client. The server that contains the desired content 
(called an "origin server") then receives the request. From the origin server's point of 
view, the proxy server 31 2 generated the request," in [0041] Lines 1-15). 

Therefore, it would have been obvious to one of ordinary skill in the art to block 
incoming requests intended to be routed through a proxy server that are not routed 
through a proxy server, as disclosed in Kramer, into the teachings of Vermeulen, since 
both reference are directed toward proxying requests, hence would be considered to be 
analogous based on their related fields of endeavor. 

One would be motivated to do so as Vermeulen's system is set up so that all 
client file requests are to be routed through a proxy, and it should be obvious to one of 
ordinary skill in the art to recognize that if a system is set to route all requests through a 
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proxy, any request that is not routed tlirougli tlie proxy sliould be denied, as it is well 
l^nown that firewalls are commonly set in place to avoid such unsafe routing techniques. 

20. In regard to claim 36, Vermeulen-Kramer teaches the server-side data- 
processing machine (see "Remote Server," from Vermeulen in Fig. 1 [14]) of claim 21, 
wherein said data-access engine is located in a first network (see inherent Control 
Program of Remote Server in a Remote Network, from Vermeulen in Fig. 1 [13][14]) 
and at least one of said at least one pseudo one server {see Control Program of Proxy 
Server, e.g. "a control program stored in main memory 34," from Vermeulen in [0026] 
Lines 1-11) Is located in a second network (see Network between client and Proxy, in 
Fig. 1 [11] [12], e.g. "A client 11 is connected to a proxy server 12,"from Vermeulen in 
[0022] Lines 2-3) having said client-side data-processing machine (see "Client," from 
Vermeulen in Fig. 2 [11]). 

21 . In regard to claim 40, Vermeulen-Kramer teaches the server-side data- 
processing machine (see "Remote Server," from Vermeulen in Fig. 1 [14]) of claim 21, 

wherein a local data request from said client-side data-processing machine (see 
"C//ent " from Vermeulen in Fig. 2 [11]) for data stored In one of said at least one 
pseudo server can be fulfilled directly by said one of said at least one pseudo server 
(e.g. "If client 11 requests a file that has already been loaded and therefore is still 
contained in the cache, the proxy server will send this file directly from the cache to the 
client," from Vermeulen in [0022] Lines 13-15). 
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22. In regard to claim 41 , Vermeulen-Kramer teaches the server-side data- 
processing machine of claim 21, wherein said server-logic module (e.g. "a control 
program... containing a sequence of control instructions to perform the functions 
described in... FIG. 2, "from Vermeulen in [0026] Lines 1-11) and said user interface 
of each of said at least one pseudo servers {see interface of proxy to receive client 
output initiated by client user, from Vermeulen in Fig. 3 [31], e.g. "Proxy server 12 has 
a first interface 31, which is connected to the client," from Vermeulen in [0026] Lines 
2-3) further are for fulfilling logic requests {see inherent logic contained in "File 
Request", from Vermeulen in Fig. 2 [21]) and user interface requests {see requests 
sent using user interface, e.g. "an Internet browser, for example. According to inputs by 
a user of the client, the control program causes files to be loaded from the distributed 
file system over the network into main memory," from Vermeulen in [0028] Lines 3-6) 
originating from said client memory {see "requests inherently originated from the clients 
fRAM," from Vermeulen in Fig. 4 [43]) of said client-side data-processing machine {see 
"Client," from Vermeulen in Fig. 2 [11]). 

21. Claims 37-38 and are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Vermeulen-Kramer in view of Nagar. 

22. In regard to claim 37, Vermeulen-Kramer teaches the server-side data- 
processing machine {see "Remote Server," from Vermeulen in Fig. 1 [14]) of claim 22, 
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wherein said data-access engine is configured to communicate {e.g. "control program 
adapted to... return the computed hash code to the client via an interface of server 14," 
from Vermeulen in [0025] Lines 4-7) with other client-side data-processing machines 
{e.g. "several clients are connected to such a proxy server via an internal corporate 
network (intranet)," from Vermeulen in [0023] Lines 4-5), but 

Vermeulen-Kramer does not teach that the data-access engine communicates 
with other client-side data-processing machines via pseudo servers residing within said 
first network as claimed. 

However, Nagar teaches the data-access engine (see "Server Program," in Fig. 
2 [220]) communicates with other client-side data-processing machines {see multiple 
computers and intranet as the client-side, in Fig. 2 [202] [206] [208]) via pseudo 
servers residing within said first network {see multiple proxy servers inside intranet, in 
Fig. 2 [202] [228] [230]). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to add the features of using a plurality of proxy servers to 
communicate with clients inside of an intranet network, as disclosed in Nagar, into the 
teachings of Vermeulen-Kramer, since all of the references are directed toward proxy 
servers, hence would be considered to be analogous based on their related fields of 
endeavor. 

One would be motivated to do so because it is well known that in distributed 
computer network systems (e.g. " Computer network 13 with its servers 14 represents a 
distributed file system," from Vermeulen in [0022]), multiple system components may 
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be used in a larger system to facilitate larger amount's of requested information in order 
to reduce the load on a single system component. 

23. In regard to claim 38, Vermeulen-Kramer teaches the server-side data- 
processing machine {see "Remote Server," from Vermeulen in Fig. 1 [14]) of claim 21, 
but 

Vermeulen-Kramer does not teach wherein said data-access engine is 
configured to communicate via a content-filtering device deployed between said data 
access engine and said at least one pseudo server as claimed. 

However, Nagar teaches a data-access engine (see "Server Program," in Fig. 2 
[220]) is configured to communicate via a content-filtering device deployed between 
{see "Response Filter," in Fig. 2 [232] and Fig. 3 [320]) said data access engine {see 
"Server Program," in Fig. 2 [220]) and said at least one pseudo server {see "Proxy 
Server," in Fig. 2 [228]). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to add the features filtering content between a proxy 
server and a remote server, as disclosed in Nagar, Into the teachings of Vermeulen- 
Kramer, since all of the references are directed toward proxy servers, hence would be 
considered to be analogous based on their related fields of endeavor. 

One would be motivated to do so because Nagar discloses the current problem 
with state of the art filtering methods (e.g. "Generally, once the software developer 
writes a system that performs any filtering of information, what is filtered or how it is 
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filtered cannot be modified except by liaving the software developer create a whole new 
filtering system," from Nagar in Col. 1, Lines 41-44) and discloses tine need for 
improvement in content filtering (e.g. "Therefore it is desirable to improve the filtering of 
information." from Nagar in Col. 2, Lines 4-5), and the incorporation of Nagar into 
Vermeulen -Kramer could enhance Vermeulen-Kramer by allowing for current 
modification of filter rules in filtering incoming and outgoing proxy request data as it is 
well known that proxies are filtered {e.g. "The proxy server with plug-in filters allows for 
easy modification of what information to filter and how to filter it," from Nagar in Col. 2, 
Lines 11-13). 

23. Claim 39 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Vermeulen-Kramer in view of Cohen. 

24. In regard to claim 39, Vermeulen-Kramer teaches the server-side data- 
processing machine (see "Remote Sen/er," from Vermeulen in Fig. 1 [14]) of claim 21 , 
but 

Vermeulen-Kramer does not teach wherein said data-access engine is 
configured to only fulfill said data request according to restrictions set by a network vault 
as claimed. 

However, Cohen teaches a data-access engine (see "Server's Software 
Module," in Fig. 3 [48]) is configured to only fulfill said data request {e.g. "request by a 
transaction to access stored information," m Col. 13, Lines 42-43) according to 
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restrictions set by a networl^ vault {e.g. Security software module 48 examines eacli 
sucti request to determine.. .wfiettier the user lias permission to perform the transaction 
to the particular network vault," in Col. 13, Lines 43-47). 

Tlierefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed Invention to combine the feature of restricting the retrieval of the 
requested stored data by using "network vaults" as disclosed in Cohen, into the 
teachings of Vermeulen-Kramer, since all of the reference are directed toward a 
accessing stored data, hence would be considered to be analogous based on their 
related fields of endeavor. 

One would have been motivated to do so as Cohen discloses the problems 
associated with proxy servers and filtered communication and discussed the 
advantages of using network vaults to increase security {e.g. "firewalls and proxy 
servers, can only provide filtering of communication and therefore are not sufficiently 
robust and secure to permit a direct connection to, and packet exchange with, limited 
access network 18. Therefore, if a risk is overlooked, the filter will fail. Also, the security 
of the firewall and/or proxy server itself can be breached, enabling the intruder to 
change the declarations for filtering in order to permit unauthorized access through the 
firewall and/or proxy server However, the present invention does not require such 
packet exchange across networks, so no such declarations are needed," from Cohen 
in Col. 7, Lines 39-50). 
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25. Claims 42-43 and 47-48 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Vermeulen in view of US 2003/0084159 A1 to Blewett. 

26. In regard claim 42, Vermeulen teaches a server-side data-processing machine 
{see "Remote Server," in Fig. 1 [14]) for securely and efficiently fulfilling network 
requests, the server-side data-processing machine comprising: 

(a) a data-access engine, residing in a server memory {see inherent file 
storage component inside Remote Server, e.g. "Servers 14...Sucli sen/ers 
dedicated to storing files," in [0025] Lines 7-8) of server-side data-processing 
machine {see "Remote Server," in Fig. 1 [14]) for communicating (see 
"communication between Proxy and Remote Server, in Fig. 2 [12] [14] [22] [24]) 
with at least one pseudo server {see control program in Proxy Server, e.g. "proxy 
server 12. . .executes a control program stored in main memory 34.. .to perform 
tlie functions described in... FIG. 2,"\n [0026] Lines 1-11) residing in a 
secondary memory (see "FiAM of Proxy server, in Fig. 3 [34]) of a secondary 
data-processing machine different from said server-side data processing 
machine, {see "Remote Server," and "Proxy Server," in Fig. 1 [12] [14]), 

wherein said at least one pseudo server {e.g. "a control program," in 
[0026] Lines 1-11) includes a server-logic module (e.gf. "a control 
program... containing a sequence of control instructions to perform the functions 
described in... FIG. 2," in [0026] Lines 1-11) and a user interface (Ul) (see 
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interface of proxy to receive client output initiated by client user, in Fig, 3 [31], 
e.g. "Proxy server 12 has a first interface 31, which is connected to the client," in 
[0026] Lines 2-3) for fulfilling data requests {see Tile Request" and Tile 
Transfer," in Fig. 2 [21] [27]) originating from a client memory (see "requests 
inherently originated from the clients RAM," in Fig. 4 [43]) of a client-side data- 
processing machine (see "Client," \n Fig. 2 [11]), and 

wherein the data request from said client-side data-processing machine 
for data stored in said data-access engine must be routed through one of said at 
least one pseudo server (see "Client" "Proxy" and "Remote Server," in Fig. 1 [11] 
[12] [14], e.g. "If client 1 1 wants to load a file from server 14, this request is 
handled via proxy server 12," in [0022] Lines 9-11), 

wherein the functionality of said data access engine (see inherent file 
storage component inside Remote Server, e.g. "Servers 14... Such sen/ers 
dedicated to storing files," in [0025] Lines 7-8) related to said data request from 
said client-side data-processing machine (see "File Request" in Fig. 2 [21]) is 
confined to data storage and retrieval (see functionality of the Remote Server's 
storage engine to store files and have files retrieved from the storage engine, e.g. 
"Servers 14... Such servers dedicated to storing files," in [0025] Lines 7-8 and 
e.g. "Client 1 1 therefore sends a file request 21 with the address of the requested 
file to proxy server 12. . .proxy server 12 will send a "send file" request, 26, to 
remote server 14, which then transfers the file, 27, to the proxy server," in [0024] 
Lines 5-17), but 



Application/Control Number: 10/599,402 Page 22 

Art Unit: 2441 

Vermeulen does not teach 

wherein said at least one pseudo server fulfills data requests via a first set 
of at least one communication protocols originating from a client memory of a 
client-side data-processing machine, and 

wherein the pseudo server communicates with the data access engine via 
a second set of at least one communication protocols. 

However, Blewett teaches 

a pseudo proxy server that operates without having to modify any 
communication protocols by client devices (e.g. "One of the benefits of the 
present invention is that the pseudo proxy 120 may be employed without having 
to modify any communication protocols that may be defined for the client terminal 
130," in [0036] Lines 1-4). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to combine the feature of using a multi protocol proxy 
server to handle different client communication protocols, as disclosed in Blewett, into 
the teachings of Vermeulen since both reference are directed toward proxying 
requests, hence would be considered to be analogous based on their related fields of 
endeavor. 

One would have been motivated to do so as Vermeulen is concerned with 
proxying data between multiple clients {e.g. "Furthermore, use is frequently made of so- 
called proxy servers which are disposed between one or more client computers and the 
distributed file system. These proxy servers, too, have a large cache memory in which 
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the last loaded files are held temporarily in the hope of another access, " from 
Vermeulen in [0004]), and Blewett could enhance Vermeulen's proxy by allowing 
more compatibility between different client types {e.g. "One of the benefits of the 
present invention is that the pseudo proxy 120 may be employed without having to 
modify any communication protocols that may be defined for the client terminal 130. 
The addition or removal of a pseudo proxy server 120 is transparent to the client 
terminal 130. In this manner, the pseudo proxy server 120 operates differently than 
known proxies which typically have their own predefined protocol," from Blewett in 
[0036]), and it should be obvious to one of ordinary skill in the art to recognize that if a 
proxy server is cable of servicing multiple communication protocols, the communication 
protocols used by two different communications protocols accessing the same proxy 
server will result in at least one of the incoming data utilizing a different communication 
protocol incoming to the proxy server than the outgoing communication protocol being 
proxied to the intended destination. 

27. In regard to claim 43, Vermeulen-Blewett teaches the server-side data- 
processing machine {see "Remote Server/ from Vermeulen in Fig. 1 [14]) of claim 21, 
wherein said data-access engine is located in a first network {see inherent Control 
Program of Remote Server in a Remote Network, from Vermeulen in Fig. 1 [13][14]) 
and at least one of said at least one pseudo one server {see Control Program of Proxy 
Server, e.g. "a control program stored in main memory 34, "from Vermeulen in [0026] 
Lines 1-11) is located in a second network {see Network between client and Proxy, in 
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Fig. 1 [11] [12], e.g. "A client 11 is connected to a proxy server 12, "from Vermeulen in 
[0022] Lines 2-3) having said client-side data-processing machine {see "Client," from 
Vermeulen in Fig. 2 [11]). 

28. In regard to claim 47, Vermeulen-Blewett teaches the server-side data- 
processing machine {see "Remote Server," from Vermeulen in Fig. 1 [14]) of claim 21 , 
wherein a local data request from said client-side data-processing machine {see 
"Client," from Vermeulen in Fig. 2 [11]) for data stored in one of said at least one 
pseudo server can be fulfilled directly by said one of said at least one pseudo server 
{e.g. "If client 1 1 requests a file that has already been loaded and therefore is still 
contained in the cache, the proxy server will send this file directly from the cache to the 
client," from Vermeulen in [0022] Lines 13-15). 

29. In regard to claim 48, Vermeulen-Blewett teaches the server-side data- 
processing machine of claim 21, wherein said server-logic module {e.g. "a control 
program... containing a sequence of control instructions to perform the functions 
described in... FIG. 2,"from Vermeulen in [0026] Lines 1-11) and said user interface 
of each of said at least one pseudo servers {see interface of proxy to receive client 
output initiated by client user, from Vermeulen in Fig. 3 [31], e.g. "Proxy sen/er 12 has 
a first interface 31, which is connected to the client," from Vermeulen in [0026] Lines 
2-3) further are for fulfilling logic requests {see inherent logic contained in Tile 
Request", from Vermeulen in Fig. 2 [21]) and user interface requests {see requests 
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sent using user interface, e.g. "an Internet browser, for example. According to inputs by 
a user of the client, the control program causes files to be loaded from the distributed 
file system over the network into main memory," from Vermeulen in [0028] Lines 3-6) 
originating from said client memory {see "requests inherently originated from the clients 
RAM," from Vermeulen in Fig. 4 [43]) of said client-side data-processing machine (see 
"C//ent"from Vermeulen in Fig. 2 [11]). 

30 Claims 44-45 and are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Vermeulen -Blewett in view of Nagar. 

31 . In regard to claim 44, Vermeulen-Blewett teaches the server-side data- 
processing machine (see "Remote Server," from Vermeulen in Fig. 1 [14]) of claim 22, 

wherein said data-access engine is configured to communicate {e.g. "control program 
adapted to... return the computed hash code to the client via an interface of server 14," 
from Vermeulen in [0025] Lines 4-7) with other client-side data-processing machines 
{e.g. "several clients are connected to such a proxy server via an internal corporate 
network (intranet)," from Vermeulen in [0023] Lines 4-5), but 

Vermeulen-Blewett does not teach that the data-access engine communicates 
with other client-side data-processing machines via pseudo servers residing within said 
first network as claimed. 

However, Nagar teaches the data-access engine (see "Sen/er Program," in Fig. 
2 [220]) communicates with other client-side data-processing machines (see multiple 
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computers and intranet as the client-side, in Fig. 2 [202] [206] [208]) via pseudo 
servers residing within said first network {see multiple proxy servers inside intranet, in 
Fig. 2 [202] [228] [230]). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to add the features of using a plurality of proxy servers to 
communicate with clients inside of an intranet network, as disclosed in Nagar, into the 
teachings of Vermeulen-Blewett, since all of the references are directed toward proxy 
servers, hence would be considered to be analogous based on their related fields of 
endeavor. 

One would be motivated to do so because it is well known that in distributed 
computer network systems (e.g. " Computer network 13 witli its servers 14 represents a 
distributed file system," from Vermeulen in [0022]), multiple system components may 
be used in a larger system to facilitate larger amount's of requested information in order 
to reduce the load on a single system component. 

32. In regard to claim 45, Vermeulen-Blewett teaches the server-side data- 
processing machine (see "Remote Server," from Vermeulen in Fig. 1 [14]) of claim 21, 
but 

Vermeulen-Blewett does not teach wherein said data-access engine is 
configured to communicate via a content-filtering device deployed between said data 
access engine and said at least one pseudo server as claimed. 
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However, Nagar teaches a data-access engine {see "Server Program," in Fig. 2 
[220]) is configured to communicate via a content-filtering device deployed between 
{see "Response Filter," in Fig. 2 [232] and Fig. 3 [320]) said data access engine {see 
"Server Program," in Fig. 2 [220]) and said at least one pseudo server {see "Proxy 
Server," in Fig. 2 [228]). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to add the features filtering content between a proxy 
server and a remote server, as disclosed in Nagar, into the teachings of Vermeulen- 
Blewett, since all of the references are directed toward proxy servers, hence would be 
considered to be analogous based on their related fields of endeavor. 

One would be motivated to do so because Nagar discloses the current problem 
with state of the art filtering methods (e.g. "Generally, once the software developer 
writes a system tliat performs any filtering of information, wiiat is filtered or how it is 
filtered cannot be modified except by having the software developer create a whole new 
filtering system," from Nagar in Col. 1, Lines 41-44) and discloses the need for 
improvement in content filtering (e.g. "Therefore it is desirable to improve the filtering of 
information." from Nagar in Col. 2, Lines 4-5), and the incorporation of Nagar into 
Vermeulen-Kramer could enhance Vermeulen-Kramer by allowing for current 
modification of filter rules in filtering incoming and outgoing proxy request data as it is 
well known that proxies are filtered {e.g. "The proxy server with plug-in filters allows for 
easy modification of what information to filter and how to filter it," from Nagar in Col. 2, 
Lines 11-13). 
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33. Claim 46 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Vermeulen-Blewett in view of Cohen. 

34. In regard to claim 39, Vermeulen-Blewett teaches the server-side data- 
processing machine {see "Remote Server/'hom Vermeulen in Fig. 1 [14]) of claim 21 , 
but 

Vermeulen-Blewett does not teach wherein said data-access engine is 
configured to only fulfill said data request according to restrictions set by a network vault 
as claimed. 

However, Cohen teaches a data-access engine {see "Server's Software 
Module," in Fig. 3 [48]) is configured to only fulfill said data request {e.g. "request by a 
transaction to access stored information," in Col. 13, Lines 42-43) according to 
restrictions set by a network vault {e.g. Security software module 48 examines each 
such request to determine.. .whether the user has permission to perform the transaction 
to the particular network vault," in Col. 13, Lines 43-47). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the claimed invention to combine the feature of restricting the retrieval of the 
requested stored data by using "network vaults" as disclosed in Cohen, into the 
teachings of Vermeulen-Blewett, since all of the reference are directed toward a 
accessing stored data, hence would be considered to be analogous based on their 
related fields of endeavor. 
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One would have been motivated to do so as Cohen discloses the problems 
associated with proxy servers and filtered communication and discussed the 
advantages of using network vaults to increase security (e.g. "firewalls and proxy 
servers, can only provide filtering of communication and therefore are not sufficiently 
robust and secure to permit a direct connection to, and packet exchange with, limited 
access networlc 18. Therefore, if a risk is overlooked, the filter will fail. Also, the security 
of the firewall and/or proxy server itself can be breached, enabling the intruder to 
change the declarations for filtering in order to permit unauthorized access through the 
firewall and/or proxy server However, the present invention does not require such 
packet exchange across networks, so no such declarations are needed," from Cohen 
in Col. 7, Lines 39-50). 



Response to Arguments 

35. In the Remarks Applicant argued in substance that: 

(A) Vermeulen's control program contained in the proxy server is responsible for 
accepting file requests from a client and returning the requested file to the client, which 
is different from the present invention in which the pseudo server handles other 
functions and the server is responsible for data storage and data retrieval. (Page 11) 
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(B) Claim 27 and it's corresponding system and method claims have been 
amended to clarify that logic request that logic requests and user interface requests are 
requests that originate from the client-side data-processing machine, in order to 
overcome the 1 12 second paragraph rejection. (Page 13) 

In response to Argument (A), Examiner respectfully disagrees with applicants 
because Vermeulen's proxy server receives all of its stored data from the remote 
server, as the proxy server is a cache storage of data retrieved from the remote server; 

therefore, the functionality of the remote server is for storage of data and data retrieval 
for the client through the proxy server {see functionality oftlie Remote Server's storage 
engine to store files and have files retrieved from the storage engine, e.g. "Servers 
14... Such servers dedicated to storing files," in [0025] Lines 7-8 and e.g. "Client 11 
therefore sends a file request 21 with the address of the requested file to proxy server 
12.. .proxy server 12 will send a "send file" request, 26, to remote server 14, which then 
transfers the file, 27, to the proxy server," in [0024] Lines 5-17). 

In response to Argument (B), Examiner has removed the rejection but notes 
that the specification does not define a "logic request," or a "user interface request," nor 
do the claims define what differences there are between a logic request and a user 
interface request, or if they are different than a data request; therefore, the logic request 
and user interface requests are interpreted broadly as a request using a user interface 
of the client, and the logic contained inside of the request. 
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Conclusion 

36. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

US 5,935,207 to Louge et al. 
US 2002/0162020 Al to Bellaton et al. 

US 6,144,996 to Starnes et al. 
US 2003/0005080 Al to Watkins et al. 
US 2002/0184403 Al to Dahlin et al. 
US 5,642,515 to Jones et al. 
US 2003/0050974 Al to Mani-Meitav et al. 

37. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JONATHAN WILLIS whose telephone number is 
(571 )270-7467. The examiner can normally be reached on 8:00 A.M. - 6:00 P.M.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Wing Chan can be reached on (571)272-7493. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/JONATHAN WILLIS/ 
Examiner, Art Unit 2441 
4/15/2010 



/Wing F. Chan/ 

Supervisory Patent Examiner, Art Unit 2441 



